Smartbox hit by cyber attack: customer names and email addresses may have been leaked
Experience gift company Smartbox was targeted by a cyber attack on 3 November. According to the company, payment information has not been compromised.
Smartbox confirms cyber attack: personal data may have been exposed
Experience gift company Smartbox has been targeted by a cyber attack this week that may have exposed customers' personal information. This emerges from an email that B.T. learned of via Ritzau, which the company sent to its customers on Saturday.
– On 3 November 2026, we discovered unauthorised access to one of our platforms. We immediately took steps to protect our systems and prevent further unauthorised access, Smartbox writes in the email.
According to the company, the attack may have resulted in customer names and email addresses being leaked. Smartbox emphasises, however, that unauthorised actors did not gain access to payment information or passwords.
It remains unclear who is behind the attack and how they gained access to the company's systems. A major investigation has been launched, and relevant authorities – including the Data Protection Commission and the police – have been notified.
Smartbox does not immediately believe that customers have cause for concern, but urges them to be alert to suspicious emails, calls and messages – particularly enquiries requesting personal information or payment data.
– If you receive a suspicious message claiming to come from us, you should avoid clicking on links and instead contact us directly, the company states.
As part of further efforts, Smartbox will review and strengthen the security measures in its systems. In the email, the company apologises for any concerns and inconvenience the incident may have caused.
Smartbox sells experience gifts and gift cards – both in physical boxes and as digital vouchers – and according to the company's website processes approximately four million experience packages annually across ten countries.
Source: B.T.